Nacionalne agentstvo kvalifikaciy
System Administrator / Infrastructure EngineerThe National Qualifications Agency (NAK) is looking for a technically savvy system administrator to manage its own server infrastructure and ensure network security.Key technical tasks:Network engineering: Configuration and administration of the FortiGate firewall (security policies, NAT, VPN gateways). Office network management based on Ubiquiti equipment.Web infrastructure: Deployment and support of websites on own server. Configuration of web serv
System Administrator / Infrastructure Engineer
The National Qualifications Agency (NAK) is looking for a technically savvy system administrator to manage its own server infrastructure and ensure network security.
Key technical tasks:
- Network engineering: Configuration and administration of the FortiGate firewall (security policies, NAT, VPN gateways). Office network management based on Ubiquiti equipment.
- Web infrastructure: Deployment and support of websites on own server. Configuration of web servers (Nginx/Apache), management of SSL certificates and databases (MySQL/PostgreSQL).
- Cloudflare Management: Management of external DNS records, configuration of caching rules, WAF and DDoS protection at Cloudflare level.
- Server administration: Full cycle of work with Linux servers (Debian/Ubuntu/CentOS), deployment of services in Docker-containers, automatic backup settings.
- Management of workstations: Implementation of system policies for the agency's computer park, setting access and security standards for users.
- Technical support: Prompt resolution of incidents in the operation of software, office equipment and network equipment.
Our requirements for candidate:
- Network & Security: Deep understanding of the OSI model, TCP/IP stack, experience with FortiGate and Ubiquiti.
- Web Hosting: Experience in successfully setting up and administering sites "from scratch" on your own hardware (Setup LEMP/LAMP stack).
- Linux Expertise: Confident command of the CLI, writing automation scripts (Bash/Python), understanding the operation of system services (systemd).
- Virtualization: Experience with Docker/Docker-compose.
- DNS & Traffic: Knowledge of the principles of operation of Cloudflare and management of complex DNS configurations.
- User Management: Understanding of the principles of delimiting access rights and configuring local network policies.
What we offer:
- Professional stack: Own server in the data center and modern network equipment.
- Technical autonomy: Ability to independently build the service architecture and choose problem solving methods.
- Stability: Work in a state institution of a new type with with a clear focus on the result.